Requirement
"Information relating to information security threats shall be collected and analysed to produce threat intelligence."[1]
Explanation
Personnel with security and system administration responsibilities should sign up for mailing lists from CISA or similar organization to receive threat intelligence.
